Petya ransomware eats your hard drives

TechLady

Well-Known Member
Reaction score
3,174
Location
CA
Oh goodie. This one encrypts the MFT.

"When you see the Blue Screen of Death, all your data is not yet corrupted, since Petya hasn’t started to encrypt the Master File Table. So if you see that your computer shows you a BSOD, reboots and starts the Check Disk — immediately shut it down. At this point you still can remove your hard drive, connect it to another computer (but don’t use it as a boot device!) and recover your files."

https://usblog.kaspersky.com/petya-ransomware/6941/
 
wow that has got to be the dumbest method I have seen. what possible reason would a ransomware author have for targetting MFT and setting up its own boot environment?
 
Back
Top